Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nuQ7fGs98xo4HGayWXXgWdfkAqs.roa
File: nuQ7fGs98xo4HGayWXXgWdfkAqs.roa (raw, json)
Hash identifier: vPN5DiSI4oA5Zkqvvgcp6AvfWt+BRY2UXp/ixet4yiw=
Subject key identifier: 9E:E4:3B:7C:6B:3D:F3:1A:38:1C:66:B2:59:75:E0:59:D7:E4:02:AB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01930F22D9AD8660190C49C2BC3DFB76483A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nuQ7fGs98xo4HGayWXXgWdfkAqs.roa
Signing time: Sat 09 Nov 2024 04:16:02 +0000
ROA not before: Sat 09 Nov 2024 04:16:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:de00:f0::/44 maxlen: 48
2a06:de01:141::/48 maxlen: 48
2a06:de01:142::/48 maxlen: 48
2a06:de01:143::/48 maxlen: 48
2a06:de01:144::/48 maxlen: 48
2a06:de01:145::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Nov 2024 08:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0f:22:d9:ad:86:60:19:0c:49:c2:bc:3d:fb:76:48:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 9 04:16:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ee43b7c6b3df31a381c66b25975e059d7e402ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e4:3f:4c:08:59:f1:1d:d7:ea:11:7c:79:9c:
cd:30:aa:00:c6:7a:63:c8:37:63:29:25:f6:71:1d:
67:17:62:0e:ad:fe:aa:cc:b6:f4:90:22:66:09:39:
47:45:e5:34:88:e2:3d:c2:14:84:c8:c4:7a:f6:21:
20:3b:2a:5c:93:4b:64:d0:34:c7:6d:45:0b:de:0a:
38:18:43:14:2e:39:12:dc:50:c2:9b:a4:47:86:af:
90:5f:82:c9:ef:9a:62:0d:72:8e:86:2c:d6:6f:73:
de:44:8a:91:c4:60:a0:4c:4d:bd:8a:97:cf:94:cc:
de:25:e4:fb:67:f9:f4:b2:2e:6f:da:b7:96:e5:c0:
22:02:e2:39:a0:b8:73:90:b5:3b:9e:c2:fa:b3:e6:
4d:c7:ad:e3:14:c7:58:bd:15:6f:fa:02:ed:85:74:
d6:74:e3:11:79:59:ed:4e:00:e3:70:ea:0d:4a:5e:
5b:2a:47:ab:ce:fe:67:fe:bf:6e:43:c1:3a:eb:7b:
7b:2d:7c:65:b7:2a:83:fd:12:9a:0c:5d:a7:78:b7:
b5:4e:93:dc:3f:c0:d0:f5:96:01:b5:e5:07:f4:42:
65:4d:27:9c:6d:b1:9a:dd:e7:12:f3:4d:ce:82:3e:
ed:7f:bf:92:16:93:6e:e7:50:68:46:de:d4:dc:6b:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E4:3B:7C:6B:3D:F3:1A:38:1C:66:B2:59:75:E0:59:D7:E4:02:AB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nuQ7fGs98xo4HGayWXXgWdfkAqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:f0::/44
2a06:de01:141::-2a06:de01:145:ffff:ffff:ffff:ffff:ffff
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
63:93:c5:4b:43:dd:2c:e4:c3:10:94:4c:4c:e0:0f:14:80:3b:
fd:3f:50:24:21:d6:a3:02:67:cc:12:41:c4:e7:c6:da:54:fd:
2a:24:a4:d3:5e:cd:d6:8a:1d:3e:82:f5:eb:7d:f2:b7:bb:55:
53:73:97:2c:55:9a:9f:8a:88:99:ee:0c:0c:1f:4c:03:f2:f9:
e2:73:06:14:3c:c4:6b:0f:55:16:d8:76:bb:37:86:7c:09:35:
16:ff:f3:ac:34:e5:5d:13:ee:bf:46:af:ad:43:ec:af:a9:8b:
aa:73:6b:49:25:be:96:42:12:4d:ce:48:3d:81:a4:79:fc:f4:
24:8e:48:c2:2b:a0:49:d1:8c:ad:4c:de:2d:24:a0:bd:42:9b:
86:6a:a3:88:67:bb:c3:c5:5a:7a:04:05:2d:71:b0:95:a4:7d:
8b:bf:1f:8a:e7:44:aa:6b:b3:12:56:31:c9:fa:e4:a9:5f:b1:
02:78:83:e2:82:54:a4:be:50:86:1d:bb:7e:29:79:76:37:f5:
f1:2b:5f:86:b9:a8:54:4f:63:f0:1c:51:fb:00:bc:cf:9c:9e:
d5:39:63:14:89:92:b8:96:eb:70:d0:62:cd:bf:2f:48:9b:40:
da:53:96:f7:46:54:fe:ab:83:39:56:cb:a7:66:f8:6a:e9:56:
7a:85:f0:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAZMPItmthmAZDEnCvD37dkg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMTA5MDQxNjAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWU0M2I3YzZiM2RmMzFhMzgxYzY2YjI1OTc1ZTA1OWQ3ZTQwMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uQ/TAhZ8R3X6hF8eZzNMKoAxnpj
yDdjKSX2cR1nF2IOrf6qzLb0kCJmCTlHReU0iOI9whSEyMR69iEgOypck0tk0DTH
bUUL3go4GEMULjkS3FDCm6RHhq+QX4LJ75piDXKOhizWb3PeRIqRxGCgTE29ipfP
lMzeJeT7Z/n0si5v2reW5cAiAuI5oLhzkLU7nsL6s+ZNx63jFMdYvRVv+gLthXTW
dOMReVntTgDjcOoNSl5bKkerzv5n/r9uQ8E663t7LXxltyqD/RKaDF2neLe1TpPc
P8DQ9ZYBteUH9EJlTSecbbGa3ecS803Ogj7tf7+SFpNu51BoRt7U3GtzOwIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFJ7kO3xrPfMaOBxmsll14FnX5AKrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvbnVRN2ZHczk4eG80SEdheVdYWGdXZGZrQXFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAIwgYgDBwQq
Bt4AAPAwEgMHACoG3gEBQQMHASoG3gEBRAMGACoMO4f/AwcAKg6XwAdQMBIDBwAq
DpfAB5EDBwAqDpfAB5IDBgIqDpfErAMHACoOsQcJ9AMHACoOsQcJ9gMHACoOsQcN
8gMHACoOsQcYcAMHACoOsQcbngMHACoOsQcniwMGAioQzMeQMA0GCSqGSIb3DQEB
CwUAA4IBAQBjk8VLQ90s5MMQlExM4A8UgDv9P1AkIdajAmfMEkHE58baVP0qJKTT
Xs3Wih0+gvXrffK3u1VTc5csVZqfioiZ7gwMH0wD8vnicwYUPMRrD1UW2Ha7N4Z8
CTUW//OsNOVdE+6/Rq+tQ+yvqYuqc2tJJb6WQhJNzkg9gaR5/PQkjkjCK6BJ0Yyt
TN4tJKC9QpuGaqOIZ7vDxVp6BAUtcbCVpH2Lvx+K50Sqa7MSVjHJ+uSpX7ECeIPi
glSkvlCGHbt+KXl2N/XxK1+GuahUT2PwHFH7ALzPnJ7VOWMUiZK4lutw0GLNvy9I
m0DaU5b3RlT+q4M5VsunZvhq6VZ6hfDV
-----END CERTIFICATE-----
Generated at Mon Nov 11 10:09:57 2024 by rpki-client on console-ams.rpki-client.org